Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: mbG3vU3AIDNacCKo62SsQtSHrW1iLiP1aCUPp75w9VM=
Subject key identifier: 8B:6A:DF:79:E9:35:36:CB:9C:9C:59:3F:38:B8:C8:49:5B:33:95:85
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 0194BCA9D389A72C19E5D05EA820877FF285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: lju95O+q80HVTHkZWpMp9N3K6U/MsBF1wsIC1V4lcRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:89:a7:2c:19:e5:d0:5e:a8:20:87:7f:f2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=8b6adf79e93536cb9c9c593f38b8c8495b339585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:34:48:71:a4:8d:ec:2f:d7:0d:c0:7f:0a:
17:d1:20:f5:1f:d1:d0:2f:7c:11:24:8b:aa:06:57:
83:d1:fd:84:03:12:83:53:89:d5:2c:27:0e:17:a9:
32:f7:63:e0:6e:50:7f:5d:3e:21:ea:c9:ab:33:ea:
93:52:6e:02:d2:bf:a9:96:19:c9:44:cf:ac:67:07:
30:63:d7:7e:5c:b8:b8:d6:36:0b:aa:7a:91:24:85:
4e:ec:16:6f:f0:87:fc:8b:08:80:1e:b9:b1:1d:29:
87:45:02:f7:a9:af:ec:b3:e6:86:bb:cd:21:8b:6b:
c3:de:50:a1:de:b1:52:f3:e8:05:e9:e6:1d:ca:e8:
7c:39:59:36:2c:a0:c3:e6:7d:0a:be:2c:8c:ca:4a:
66:e3:92:da:df:70:bb:6a:ab:eb:d8:66:f3:77:ab:
55:c5:dd:69:f4:12:55:07:df:f1:c2:4c:ed:85:e6:
dc:b5:f1:67:ef:87:a8:99:e5:09:d2:17:e1:97:3b:
53:32:15:4f:7e:be:24:35:25:d0:c3:81:a9:6f:f3:
c2:43:e9:3b:58:a7:b7:36:c5:7f:28:fe:0b:ac:d9:
42:4f:6f:59:03:c7:5b:3c:5b:8a:a0:0b:2c:fd:51:
eb:2a:2e:d1:41:be:6e:cc:46:0b:b6:7c:95:fb:c3:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6A:DF:79:E9:35:36:CB:9C:9C:59:3F:38:B8:C8:49:5B:33:95:85
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:26:44:e3:3c:ba:86:c9:f8:bd:b5:10:a0:a8:a0:ae:84:43:
38:78:dd:e2:f2:25:c2:41:f9:1a:5d:bb:42:f0:c5:5e:9f:5a:
78:59:0c:ed:4d:22:2c:9d:13:fe:ba:5c:00:b3:6e:56:54:00:
43:11:96:43:79:fb:e2:2d:c4:db:ff:b2:89:51:65:61:82:b2:
3b:fe:75:c6:19:7c:7e:41:f6:0b:b0:d1:ec:01:db:74:a8:dc:
6a:8f:09:e2:a4:bf:17:8d:df:12:00:61:9a:00:e4:b5:9d:47:
0c:0d:7b:49:dc:26:81:dc:f2:31:12:ce:6f:b4:41:81:a9:93:
ab:d6:7f:8a:21:58:b7:1c:d2:c1:3f:62:c1:8e:a4:c1:46:95:
c7:29:c2:7e:84:25:76:02:ef:bb:d1:23:dd:b1:00:29:72:69:
bc:21:58:4e:b2:da:ca:b7:37:74:d8:7a:1e:2d:4b:30:a2:f7:
7f:43:d4:bb:55:f1:4f:dd:48:6a:2f:72:8c:70:17:08:9b:32:
e9:ce:55:0a:ff:e3:8d:77:a3:2d:ff:b6:82:29:f3:d4:f0:e3:
f6:47:ed:7f:8a:e0:4b:39:3a:2b:84:e8:4b:38:0b:96:67:43:
4c:9a:c6:46:5b:40:b2:f5:01:df:6d:6b:1b:fd:a4:9a:4c:2c:
e2:79:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:55:51 2025 by rpki-client